Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/96KipVZQh9_tVup84o6lnn6Nxvs.roa
File: 96KipVZQh9_tVup84o6lnn6Nxvs.roa (raw, json)
Hash identifier: TvCIroie5RpqDCHc0RVC+XUQoF3h9OdxugjK/WmpMWs=
Subject key identifier: F7:A2:A2:A5:56:50:87:DF:ED:56:EA:7C:E2:8E:A5:9E:7E:8D:C6:FB
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01856C780E1504269DC6C389360E02900119
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/96KipVZQh9_tVup84o6lnn6Nxvs.roa
Signing time: Sun 01 Jan 2023 08:34:45 +0000
ROA not before: Sun 01 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50113
IP address blocks: 2a07:57c0::/32 maxlen: 32
2a07:9b83::/32 maxlen: 32
2a0a:981::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:0e:15:04:26:9d:c6:c3:89:36:0e:02:90:01:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7a2a2a5565087dfed56ea7ce28ea59e7e8dc6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:79:42:d3:1a:39:4d:31:5e:17:10:0c:f1:
da:18:0e:1f:7b:6b:46:f4:68:e0:97:b0:ec:a3:54:
a2:f5:7e:5e:07:2b:09:6d:54:95:cd:90:20:14:2a:
21:35:d0:33:db:d3:96:b2:cf:de:3b:4b:b5:4a:b6:
47:45:24:88:28:72:27:fa:0e:7b:ad:dd:f9:b2:cf:
06:a8:85:0d:e9:4f:d7:9d:6c:75:21:13:42:04:d5:
56:f7:1c:72:eb:f1:9e:84:5c:4d:01:d6:1f:16:0e:
0f:49:97:1e:11:78:fa:5f:1c:b4:c8:47:61:fd:b8:
d5:f2:6c:e2:5f:2a:a4:7e:96:7d:df:ae:a1:17:45:
8f:d7:3b:6d:59:98:c1:27:d7:34:27:c4:fb:0b:95:
9d:bb:d0:fc:f9:a3:c5:89:c9:56:a6:92:cd:df:56:
8b:96:47:3d:ae:69:aa:dd:e1:3c:54:ae:43:f0:85:
db:17:be:77:83:06:e6:0d:62:3e:53:73:7b:60:64:
81:e2:dd:b8:65:98:f2:e8:6f:91:1a:a3:11:d2:cc:
12:da:0c:6b:6d:e3:63:b4:99:5e:ba:00:c6:b9:83:
52:a2:2e:f5:eb:d6:7d:0a:cf:d8:76:53:31:ca:4e:
1e:a0:ba:8b:a3:67:e7:ed:6c:8e:f0:1a:4c:6e:a4:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A2:A2:A5:56:50:87:DF:ED:56:EA:7C:E2:8E:A5:9E:7E:8D:C6:FB
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/96KipVZQh9_tVup84o6lnn6Nxvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:57c0::/32
2a07:9b83::/32
2a0a:981::/32
Signature Algorithm: sha256WithRSAEncryption
07:35:56:02:c6:9c:1b:0f:22:54:92:b7:23:43:fc:73:95:af:
8b:33:75:ee:5b:2c:38:6d:b3:77:93:85:d0:d2:19:34:0f:a0:
a2:f0:ab:cc:9b:d1:43:e0:03:c7:6c:23:50:08:70:80:cc:c7:
b5:7f:27:6a:5c:d6:21:c6:5d:a6:19:f1:09:e9:76:b5:3c:4c:
bc:04:8b:a5:6f:3b:a3:a1:40:54:ca:5d:92:60:ec:94:8a:06:
8d:9b:47:8a:2d:1f:67:bb:0d:0e:05:0f:bc:fc:4b:81:97:b9:
7c:27:3c:fe:5a:7a:cf:02:b1:c2:39:81:44:40:57:78:52:76:
56:37:d3:00:4b:5e:c7:e5:30:e6:b0:71:1a:f0:f9:b9:62:32:
d2:f4:f6:80:ba:7f:90:1e:e1:b5:5f:78:46:7d:93:44:3a:80:
29:3d:fc:74:2f:4c:7d:49:eb:89:de:04:d6:6d:63:f7:98:e6:
f0:85:af:66:ae:fd:14:d8:34:04:98:99:4e:ca:23:45:f4:eb:
b8:2b:12:02:91:e0:84:4a:98:66:5f:28:2e:53:b8:4a:13:61:
f2:7c:a9:d7:f1:cc:56:67:11:28:33:7f:21:24:0d:07:68:6a:
41:73:e4:7d:82:5b:98:b0:f9:af:db:f2:f6:5b:a4:49:40:50:
49:13:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:29 2024 by rpki-client on console-ams.rpki-client.org